Use this skill when the user wants a cheaper, more reliable alternative to computer use for automating websites. Use this skill when the user wants to instal...
Security Analysis
medium confidenceThe skill is a discovery/instruction stub that coherently points users to install NoUI components from a GitHub repo; it does not request credentials itself, but installing the referenced components will fetch third-party code and may involve browser cookies and local configuration, so proceed with caution.
The name/description (installing and getting started with NoUI skills) matches the SKILL.md: it is a discovery stub that lists commands to install specific NoUI sub-skills. Nothing requested by the skill itself (no env vars, no binaries) is out of scope for that purpose.
The SKILL.md contains explicit shell commands (npx skills add https://github.com/adoptai/noui --skill <name>) to fetch/install other skills from GitHub and instructs running a one-time /noui-setup that configures a venv, .env, and a Chrome extension. The file warns agents not to use the interactive installer form. These instructions are consistent with the stated purpose but do direct the agent/user to install and configure third-party code and a browser extension — actions that can access sensitive local data (cookies, profiles) during later steps.
There is no install spec in the registry entry itself, but the instructions instruct use of npx to pull code from GitHub (github.com/adoptai/noui). GitHub is a well-known host, which is typical for such tooling, but fetching and running third-party packages is a moderate-risk operation because it executes external code. The SKILL.md explicitly defers actual installs to those fetched packages.
The skill declares no required environment variables or credentials (none in registry metadata). However, the setup step mentions creating a .env and using a Chrome extension / Tabby session; the downstream sub-skills you install may request credentials or access browser session data. The absence of env/credential requests in this stub is proportionate to its discovery role.
No elevated persistence is requested: always is false, the skill is user-invocable, and it does not modify other skills or request system-wide config. Autonomous invocation remains allowed by default (disable-model-invocation false), which is normal for skills but means agent autonomy could install downstream components if permitted — exercise the usual caution.
Guidance
This skill is basically a pointer that tells you how to install other NoUI components from GitHub; the pointer itself is coherent and asks for nothing sensitive. Before installing: (1) review the GitHub repository (https://github.com/adoptai/noui) to verify maintainers, recent commits, and issues; (2) prefer installing as a human in an isolated environment (venv, temporary machine, or disposable browser profile) because the tooling will ask to install a Chrome extension and may reuse browser sessions/cookies; (3) do not let an autonomous agent run the interactive installer form — run the per-skill npx commands yourself; (4) inspect any .env or credential prompts from downstream sub-skills and only provide secrets you are willing to expose to those components; (5) if you need higher assurance, run the install in a sandbox or review the downstream code before executing.
Latest Release
v1.0.0
NoUI 1.0.0 — Initial Release - Introduces a discovery skill to install, explore, and set up NoUI skills for browser automation without UI interaction. - Provides commands and menu for step-by-step or bulk installation of core and demo skills. - Core pipeline skills enable secure, reliable, and fast workflow exports (from record to API tool generation). - Includes references for two demo skills (Airbnb and Expedia search) for quick start or testing. - Documentation guides users through installation, setup, and next steps; warns agents not to use the interactive selector.
Popular Skills
Published by @gabriel-adopt on ClawHub
